CVEvulnerability
CVE-2008-0586
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg, and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh.
Affected configurations
• ibm aix 5.2
• ibm aix 5.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc aix.software.ibm.com
- http://osvdb.org/40427 osvdb.org
- http://osvdb.org/40428 osvdb.org
- http://osvdb.org/40429 osvdb.org
- http://secunia.com/advisories/28609 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98448 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98450 www-1.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY98331 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY98340 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY99537 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ00559 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ10828 www.ibm.com
- http://www.securityfocus.com/bid/27431 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0261 www.vupen.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068 www14.software.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39907 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5704 oval.cisecurity.org
- http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc aix.software.ibm.com
- http://osvdb.org/40427 osvdb.org
- http://osvdb.org/40428 osvdb.org
- http://osvdb.org/40429 osvdb.org
- http://secunia.com/advisories/28609 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98448 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98450 www-1.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY98331 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY98340 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IY99537 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ00559 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ10828 www.ibm.com
- http://www.securityfocus.com/bid/27431 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0261 www.vupen.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068 www14.software.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39907 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5704 oval.cisecurity.org